hashicorp/consul v1.16.2 on GitHub

1.16.2 (September 19, 2023)

SECURITY:

IMPROVEMENTS:

Adds flag -append-filename (which works on values version, dc, node and status) to consul snapshot save command.
Adding the flag -append-filename version,dc,node,status will add consul version, consul datacenter, node name and leader/follower
(status) in the file name given in the snapshot save command before the file extension. [GH-18625]
Reduce the frequency of metric exports from Consul to HCP from every 10s to every 1m [GH-18584]
api: Add support for listing ACL tokens by service name. [GH-18667]
checks: It is now possible to configure agent TCP checks to use TLS with
optional server SNI and mutual authentication. To use TLS with a TCP check, the
check must enable the tcp_use_tls boolean. By default the agent will use the
TLS configuration in the tls.default stanza. [GH-18381]
command: Adds -since flag in consul debug command which internally calls hcdiag for debug information in the past. [GH-18797]
log: Currently consul logs files like this consul-{timestamp}.log. This change makes sure that there is always
consul.log file with the latest logs in it. [GH-18617]

BUG FIXES:

Inherit locality from services when registering sidecar proxies. [GH-18437]
UI : Nodes list view was breaking for synthetic-nodes. Fix handles non existence of consul-version meta for node. [GH-18464]
api: Fix /v1/agent/self not returning latest configuration [GH-18681]
ca: Vault provider now cleans up the previous Vault issuer and key when generating a new leaf signing certificate [GH-18779] [GH-18773]
check: prevent go routine leakage when existing Defercheck of same check id is not nil [GH-18558]
connect: Fix issue where Envoy endpoints would not populate correctly after a snapshot restore. [GH-18636]
gateways: Fix a bug where gateway to service mappings weren't being cleaned up properly when externally registered proxies were being deregistered. [GH-18831]
telemetry: emit consul version metric on a regular interval. [GH-18724]